Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/A98F28BEA4F711ECB632D678C4F9AE02.roa
File: A98F28BEA4F711ECB632D678C4F9AE02.roa (raw, json)
Hash identifier: Uxg2VLYqykN2wS8QT71O8XczfZOBtE2qFLri6o08ESc=
Subject key identifier: 6D:91:A6:B6:FB:26:0C:C2:9A:89:F7:07:8F:E4:F7:69:BB:FA:C1:98
Certificate issuer: /CN=A91C7D3C/serialNumber=FFADB56806FB93B16C5EC32B81E56E99DCC3C9A3
Certificate serial: 092F
Authority key identifier: FF:AD:B5:68:06:FB:93:B1:6C:5E:C3:2B:81:E5:6E:99:DC:C3:C9:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_621aAb7k7FsXsMrgeVumdzDyaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/A98F28BEA4F711ECB632D678C4F9AE02.roa
Signing time: Tue 03 May 2022 08:26:34 +0000
ROA not before: Tue 03 May 2022 08:26:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138346
IP address blocks: 103.88.232.0/24 maxlen: 24
103.88.233.0/24 maxlen: 24
103.88.234.0/24 maxlen: 24
103.88.235.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351 (0x92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7D3C/serialNumber=FFADB56806FB93B16C5EC32B81E56E99DCC3C9A3
Validity
Not Before: May 3 08:26:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6270e73a-c804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:9b:a9:99:92:e6:94:18:d1:ef:15:ee:9c:
ad:ca:fd:bd:35:b0:4e:8a:81:86:81:7b:72:c1:12:
13:bf:5d:b5:bc:40:41:8c:b1:72:64:31:3c:e0:a2:
57:71:41:2e:49:6f:1a:e8:87:75:27:8c:9b:d7:82:
6d:90:de:9c:55:e4:c7:27:7d:b0:19:39:2a:dc:38:
4a:d1:b2:ac:c0:00:4e:2f:e5:d7:25:e7:c1:27:72:
a6:ba:1c:e4:a8:58:40:ae:5e:12:26:27:35:ad:06:
48:c6:23:32:f3:1b:a0:43:79:3e:5b:1d:cb:13:80:
45:a7:c9:cf:d1:cb:ec:54:c6:dd:18:7d:e5:be:cd:
d3:27:78:33:92:1b:52:db:bb:3b:91:22:1a:ee:dd:
6a:8e:e9:f3:3e:7c:9f:43:fa:8e:21:ca:8b:4b:04:
56:30:f1:1c:bd:0a:bc:37:25:d2:ee:f6:12:76:8b:
fc:56:0a:8d:27:78:b0:5c:f2:03:46:69:b6:92:20:
04:a5:20:94:24:1b:e3:3c:1b:db:ce:96:0f:72:14:
05:a1:79:70:2b:6f:4b:0d:1c:c0:62:38:60:d2:bc:
9b:5d:1a:d8:b4:80:ae:d1:2b:4c:b2:23:08:37:41:
a5:bd:e5:99:b9:96:07:18:3c:7d:e6:42:97:05:1a:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:A6:B6:FB:26:0C:C2:9A:89:F7:07:8F:E4:F7:69:BB:FA:C1:98
X509v3 Authority Key Identifier:
keyid:FF:AD:B5:68:06:FB:93:B1:6C:5E:C3:2B:81:E5:6E:99:DC:C3:C9:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/_621aAb7k7FsXsMrgeVumdzDyaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_621aAb7k7FsXsMrgeVumdzDyaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/A98F28BEA4F711ECB632D678C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.232.0/22
Signature Algorithm: sha256WithRSAEncryption
47:fc:55:1a:9e:19:33:5b:4a:ad:64:55:e1:a9:0f:1d:6a:c1:
e3:53:4b:8f:d4:5b:bd:b9:df:d0:0c:2b:37:33:cf:6e:cc:02:
2b:06:d5:d1:27:83:71:88:13:7b:1e:f6:09:9b:be:55:e2:8b:
4e:30:65:c1:27:47:e4:2c:91:43:8d:e4:5b:f8:b8:67:2c:64:
37:d9:df:20:26:f0:5d:5c:3c:de:7f:00:65:61:0c:8c:c7:64:
89:8c:28:1a:7d:a9:f5:16:25:d1:97:8b:76:fd:6c:15:fe:e8:
17:47:92:c9:7d:c2:53:d7:09:14:8d:92:d4:93:80:18:8b:e6:
27:25:9a:0f:ef:9f:57:ad:9f:60:17:e8:24:22:d2:d5:a2:7e:
35:dd:e4:27:3b:bd:38:fe:5e:20:7c:8a:db:a4:b0:4f:ce:d9:
db:78:65:2a:7c:a2:c4:3d:a3:a3:29:6a:99:bb:53:30:23:9b:
4c:26:30:6d:a5:7a:52:60:62:86:5b:08:51:e5:a5:e4:77:3a:
33:ea:79:ad:40:20:48:f7:27:d9:22:cc:a4:ba:5b:dc:34:7c:
b7:64:f8:b7:2f:99:ca:c5:17:4a:73:3b:72:17:da:ed:17:17:
3d:11:91:0f:53:9f:9b:01:12:e4:a1:f2:28:0f:e2:29:62:b3:
59:b5:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org